Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: 7SBqtlnJFZzaaSUju8qa/XHBsEMl1UeU+YX1mUnb1S4=
Subject key identifier: A2:D3:E4:DA:45:21:4D:7A:0F:25:CF:1D:25:C8:B5:AB:4C:2D:47:16
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 0199FEB4C865B2FC2F0AFC952D87511968A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 1538
Signing time: Sun 19 Oct 2025 23:01:24 +0000
Manifest this update: Sun 19 Oct 2025 23:01:24 +0000
Manifest next update: Mon 20 Oct 2025 23:01:24 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: z7+TwyOUYKfL6SQ2RIiTk2aAOny6NLu/YYOI2UtNYLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c8:65:b2:fc:2f:0a:fc:95:2d:87:51:19:68:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Oct 19 23:01:24 2025 GMT
Not After : Oct 20 23:01:24 2025 GMT
Subject: CN=a2d3e4da45214d7a0f25cf1d25c8b5ab4c2d4716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:9b:f4:a9:06:30:72:a6:31:8a:6b:72:05:
3d:c5:3d:9a:7f:58:dc:4b:dd:67:80:9b:f2:4e:b8:
ef:b9:2c:32:d1:fa:11:92:db:86:b3:c0:54:4e:35:
7d:cf:ab:ea:ed:40:9b:8b:a6:03:63:50:a5:90:b0:
6b:ca:45:d8:69:5d:37:d7:d0:73:6f:6a:d8:56:70:
55:1e:e5:71:94:5c:bd:30:a2:df:d4:5a:3f:26:f8:
7c:59:8a:a0:bb:18:ec:52:91:cd:07:51:7a:02:71:
ca:50:0f:9e:d7:56:9a:d9:0c:45:7f:5d:d4:bb:db:
69:bf:ff:73:81:58:1f:0b:db:99:df:81:95:c1:27:
a8:70:1f:43:2f:fd:6d:93:ba:4e:74:9d:3c:1c:4a:
36:14:9f:47:24:9d:0b:eb:22:a6:16:90:f5:bc:98:
d0:4e:9a:81:d3:62:b8:3e:a0:7f:7f:01:b6:91:00:
a7:ea:1e:87:c8:c2:1d:8d:5b:eb:93:ca:3b:7d:b1:
67:63:1d:4a:a4:1b:40:c1:1d:d5:f4:ea:da:c2:c0:
28:ec:e4:bb:57:20:fc:e0:0e:45:5d:cb:2f:d2:29:
3d:f2:9a:2a:4d:69:2d:8c:f0:89:e0:4f:63:34:a7:
1f:fa:e0:f7:d4:9e:d6:ae:d1:ce:d4:2e:48:a2:3d:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:E4:DA:45:21:4D:7A:0F:25:CF:1D:25:C8:B5:AB:4C:2D:47:16
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:69:f8:71:6b:8a:cd:85:e3:29:35:1c:fb:6b:77:77:c6:
9c:30:71:18:86:e1:11:ed:2a:34:40:81:27:16:0b:9a:08:22:
cc:ab:6e:31:17:d9:45:9b:66:49:15:16:89:b8:8d:28:a9:c8:
dd:e1:c9:46:de:61:28:42:58:f4:d0:c1:18:5d:a6:4b:7f:34:
ec:61:ed:c3:6a:4a:61:2f:0f:d9:6f:11:57:4e:7e:a6:54:94:
39:36:58:78:20:45:19:29:c0:8b:75:c7:84:49:4f:c0:08:5b:
99:32:c5:21:03:4b:b0:41:e2:16:0f:05:ba:a4:5d:01:91:39:
5f:08:95:2d:38:e3:39:79:a2:b4:26:10:fb:28:b3:32:4f:1a:
ad:b4:0f:be:9d:c0:d2:0a:20:cc:c4:e5:0d:9a:7a:59:51:4a:
c5:bf:b3:50:6b:13:7e:1c:5e:50:2a:e8:c0:17:c9:63:89:a0:
e0:c5:61:81:96:a9:46:ee:b0:f2:e3:70:be:ae:fc:c9:c4:5d:
ec:d0:dc:0a:66:c0:db:70:da:2b:8d:1e:98:ff:b5:d6:de:ea:
c5:58:ae:48:c7:aa:a4:2b:bd:4a:91:b9:9b:49:e1:0b:e0:70:
34:10:da:ee:57:b5:1c:d6:01:45:22:62:d6:86:55:0f:58:90:
04:99:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:09 2025 by rpki-client